Signature 2834: Java - Creation of suspicious files in Temp folder

Anyone having issues with signature 2834 not firing, but still blocking? We are having an issue where administrators when right clicking on items and doing "Run as Administrator" are being blocked. When we disable the signature, they are fine. The system is on HIPS 7 Patch 9.